Management services should be enabled on external interface for managment from outside. But then you also fill in permitted or also called manager-ip adresses, with tyour internal network and home IP address.